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Abstract 

In a previous work we introduced Dual Light Affine Logic (DLAL) (" IBT04I ) 
as a variant of Light Linear Logic suitable for guaranteeing complexity properties 
on lambda-calculus terms: all typable terms can be evaluated in polynomial time 
and all Ptime functions can be represented. In the present work we address the 
problem of typing lambda-terms in second-order DLAL. For that we give a pro- 
cedure which, starting with a term typed in system F, finds all possible ways to 
decorate it into a DLAL typed term. We show that our procedure can be run in 
time polynomial in the size of the original Church typed system F term. 



1 Introduction 

Several works have studied programming languages with intrinsic computational com- 
plexity properties. This line of research, Implicit computational complexity (ICC), is 
motivated both by the perspective of automated complexity analysis, and by founda- 
tional goals, in particular to give natural characterizations of complexity classes, like 
Ptime or Pspace. Different calculi have been used for this purpose coming from prim- 
itive recursion, lambda-calculus, rewriting systems (e.g. IIBC92I IRlMOUl ILM931). . .A 
convenient way to see these systems is in general to describe them as a subset of pro- 
grams of a larger language satisfying certain criteria: for instance primitive recursive 
programs satisfying safe/ramified recursion conditions, rewriting systems admitting a 
termination ordering and quasi interpretation, etc. . . 

Inference. To use such ICC systems for programming purpose it is natural to wish 
to automatize the verification of the criteria. This way the user could stick to a simple 
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programming language and the compiler would check whether the program satisfies 
the criteria, in which case a complexity property would be guaranteed. 

In general this decision procedure involves finding a certain witness, like a type, a 
proof or a termination ordering. Depending on the system this witness might be useful 
to provide more precise information, like an actual bound on the running time, or a 
suitable strategy to evaluate the program. It might be used as a certificate guaranteeing 
a particular quantitative property of the program. 

Light linear logic. In the present work we consider the approach of Light linear 
logic (LLL) (|Gir98|), a variant of Linear logic which characterizes polynomial time 
computation, within the proofs-as-programs correspondence. It includes higher-order 
and polymorphism, and can be extended to a naive set theory (fTer04|), in which the 
provably total functions correspond to the class of polynomial time functions. 

The original formulation of LLL by Girard was quite complicated, but a first simpli- 
fication was given by Asperti with Light Affine Logic (LAL) (| AR02|). Both systems 
have two modalities (one more than Linear logic) to control duplication. There is a 
forgetful map to system F terms (polymorphic types) obtained by erasing some infor- 
mation (modalities) in types; if an LAL typed term t is mapped to an F-typed term M 
we also say that t is a decoration of M. 

So an LAL program can be understood as a system F program, together with a 
typing guarantee that it can be evaluated in polynomial time. As system F is a refer- 
ence system for the study of polymorphically typed functional languages and has been 
extensively studied, this seems to offer a solid basis to LAL. 

However LAL itself is still difficult to handle and following the previous idea for the 
application of ICC methods, we would prefer to use plain lambda-calculus as a front- 
end language, without having to worry about the handling of modalities, and instead 
to delegate the LAL typing part to a type inference engine. The study of this approach 
was started in | Bai02J . For it to be fully manageable however several conditions should 
be fulfilled: 

1 . a suitable way to execute the lambda-terms with the expected complexity bound, 

2. an efficient type inference, 

3. a typed language which is expressive enough so that a reasonable range of pro- 
grams is accepted. 

The language LAL presents some drawback for the first point, because the LAL 
typed terms need to be evaluated with a specific graph syntax, proof-nets, in order to 
satisfy the polynomial bound, and plain beta reduction can lead to exponential blow-up. 
In a previous work (|BT04|) we addressed this issue by defining a subsystem of LAL, 
called Dual Light Affine Logic (DLAL). It is defined with both linear and non-linear 
function types. It is complete for Ptime just as LAL and its main advantage is that it 
is also Ptime sound w.rt. beta reduction: a DLAL term admits a bound on the length 
of all its beta reduction sequences. Hence DLAL stands as a reasonable substitute for 
plain LAL for typing issues. 

Concerning point 2, as type inference for system F is undecidable we don't try to 
give a full-fledged type inference algorithm from untyped terms. Instead, to separate 



the polymorphic part issue from the proper DLAL part one, we assume the initial pro- 
gram is already typed in F. Either the system F typing work is left to the user, or one 
could use a partial algorithm for system F typing for this preliminary phase. 

So the contribution of the present work is to define an efficient algorithm to decide 
if a system F term can be decorated in a DLAL typed term. This was actually one of 
the original motivations for defining DLAL. We show here that decoration can be per- 
formed in polynomial time. This is obtained by taking advantage of intuitions coming 
from proof-nets, but it is presented in a standard form with a first phase consisting in 
generating constraints expressing typability and a second phase for constraints solving. 
One difficulty is that the initial presentation of the constraints involves disjunctions of 
linear constraints, for which there is no obvious Ptime bound. Hence we provide a 
specific resolution strategy. 

The complete algorithm is already implemented in ML, in a way that follows 
closely the specification given in the article. It is modular and usable with any linear 
constraints solver The code is commented, and available for public download (Section 
|6|l. With this program one might thus write terms in system F and verify if they are 
Ptime and obtain a time upper bound. It should in particular be useful to study further 
properties of DLAL and to experiment with reasonable size programs. 

The point 3 stressed previously about expressivity of the system remains an issue 
which should be explored further Indeed the DLAL typing discipline will in particular 
rule out some nested iterations which might in fact be harmless for Ptime complex- 
ity. This is related to the line of work on the study of intensional aspects of Implicit 
computational complexity (I MM00i.Hof03l '). 

However it might be possible to consider some combination of DLAL with other 
systems which could allow for more flexibility, and we think a better understanding of 
DLAL, and in particular of its type inference, is a necessary step in that direction. 

Related work. Inference problems have been studied for several ICC systems 
f lAma OS HJ03 1). Elementary linear logic (EAL) in particular is another variant of 
Linear logic which characterizes Kalmar elementary time and has applications to op- 
timal reduction. Type inference in the propositional fragment of this system has been 
studied in |CM01 CRdR03 CDLRdROS | and |BT05 1 which gives a polynomial time 
procedure. Type inference for LAL was also investigated, in IBai02. ■Bai04.l . To our 
knowledge the present algorithm is however the first one for dealing with polymorphic 
types in a EAL-related system, and also the first one to infer light types in polynomial 
time. 

Notations. Given a lambda-term t, FV{t) will be the set of its free variables. The 
prefix relation on words will be denoted by <. 

2 From system F to DLAL 

The language Cf of system F types is given by: 

T,U -.-.^ a\T ^ U \ ya.T 

We assume that a countable set of term variables a:^, z^, . . . is given for each 
type T. The terms of system F are built as follows (here we write Af ^ to indicate that 



the term M has type T): 



with the proviso that when building a term Aa.M^ , a may not occur freely in the types 
of free term variables of M (the eigenvariable condition). 

It is well known that there is no sensible resource bound (i.e. time/space) on the 
execution of system F terms in general. To impose some bounds, a more refined type 
system is required. DLAL serves well as such a type system. 

The language Cdlal of DLAL types is given by: 

A,B y.^ a \ B \ B \ ^A\ Wa.A 

We note §"j4 = A and §'^+^j4 = §§*'A. The erasure map (.)^ from Cdlal to Cp is 
defined by: 

(§A)-=A-, {A^B)- = {A^B)- =A~ ^B-, 

and (.)^ commutes to the other connectives. We say A G Cdlal is a decoration of 
T €Cf if^" =T. 

A declaration is a pair of the form x^ : B with B^ — T. It is often written as 
a; : B for simplicity. A judgement is of the form F; A h Af : A, where M is a system 
F term, A £ Cdlal and T and A are disjoint sets of declarations. When A consists of 
Xi : Ai, . . . ,Xn ■ An, §A denotes xi : %Ai, . . . ,x„ : §A„. The type assignment rules 
are given on Figure^ Here, we assume that the substitution M[N/x] used in (§ e) is 
capture-free. Namely, no free type variable a occurring in N is bound in M [N / x] . We 
write F; A ^dlal M : A\f the judgement F; A h Af : A is derivable. 

Recall that binary words, in {0, 1}*, can be given the following type in F: 

Wp = Va.(Q! a) ^ {a ~> a) ^ {a a) 

A corresponding type in DLAL, containing the same terms, is given by: 

Wdlal — Va.(Q: a) ^ [a ^ a) ^ §(a a) 

The depth d{A) of a DLAL type A is defined by: 

d{a) = 0, d{\/a.B) = d{B), 

diA -^B) = max{d{A),d{B)), d{%A) = d{A) + 1, 
d{A^B) = max{d{A) + \,d{B)). 

A type A is said to be Hi if it does not contain a negative occurrence of V; like for 
instance Wdlal- 

The fundamental properties of DLAL are the following IBT04I : 



— (Id) 

A 

T-x: A,I^^ M : B ^ ^ Ti; Ai h M : A -« B ; A2 h A^- : A 
T; A h As^'.M : A ^ B ri,r2; Ai, A2 h {M)N : B 

x: Ar;AhM:B T; A h Af : ^ ^ B ; z : C h iV : A 
T; A h Ax-^ .M : A B T, z : C; A h (M)A^ : B ^ ^ ^ 

(Weak) ■ A I ,.rr / rn — (Cntr) 



ri,r2; Ai,A2 h M : A ' ' a; : A, T; A h M[a;/xi, a;/a;2] : B 

;r,AhM:A ^^.^ T^-Ai^N:%A r2; x : §A, A2 h Af : B ^ 



r;§A h Af : §A ' ri,r2; Ai, A2 h Af[Ar/x] : B 

r- A h Af • A T; A h Af : Va.A 

(Vi)(**) ^ A .ro/ 1 (^^) 



T; A h Aa.Ai^ : Va.A ' ' ' ' T; A h (A/)B- : A[B/a 

(*) z : C can be absent. 
(**) a does not occur freely in F. 

Figure 1 : Typing system F terms in DLAL 



Theorem 1 

1. Let M be a closed term of system F that has a Hi type A in DLAL. Then M 
can be normalized in 0(|Afp ) steps by fi-reduction, where d — d{A) and \M\ 
is the structural size of M. 

2. Every P time function f : {0, 1}* > {0, 1}* can be represented by a closed 

term M of type Wdlal —° ^"^Wdlal for some d> 0. 

Notice that the result 1 holds neither for Light linear logic nor Light affine logic. Al- 
though they are logics of polynomial time, they require some special proof syntax such 
as proof nets IGir98l lAR02l or light affine lambda calculus ITerOll to guarantee poly- 
nomial time bounds. 

The result 1 implies that if we ignore the embedded types occurring in M, the 
normal form of AI can be computed in polynomial time, when the depth is fixed. It 
moreover shows that a term A/ of type Wdlal ^'''Wdlal is Ptime, because then 
for any Church word w we have that (Af) w has type ^'''Wdlal, and can thus be 
evaluated in time 0( I u;p ^ ). 

The result 2 on the other hand guarantees that DLAL has sufficient expressive 
power, at least enough to (extensionally) represent all polynomial time functions. 

Now, let M^'^^^'^ be a system F typed term and suppose that we know that it 
has a DLAL type Wdlal -° ^"^Wdlal for some d > 0. Then, by the consequence 
of the above theorem, we know that the term M is Ptime. Thus by assigning DLAL 
types to a given system F term, one can statically verify a. polynomial time bound for 
its execution. 



As a first step to elaborate this idea to use DEAL for resource verification of system 
F terms, we address the following: 

Problem 1 {DLAL typing) Given a closed term Al'^ of system F, determine if there 
is a decoration A of M such that ^dlal M : A. 

(Here the closedness assumption is only for readability.) 

In the sequel, we show that there is a polynomial time algorithm for solving the 
DLAL typing problem. 

This should be contrasted with the fact that the set of system F terms representing 
Ptime functions is not recursively enumerable (this can be easily proved by reduction 
of Hubert's 10th problem). 

Hence even though DLAL does not capture all Ptime terms, the general problem 
is undecidable and this type system gives a partial but efficiently realizable verification 
method. 

3 Characterizing DLAL typability 
3.1 Pseudo-terms 

To address the DLAL typing problem, it is convenient to introduce an intermediary 
syntax which is more informative than system F terms (but not more informative than 
DLAL derivations themselves). 

First we decompose A ^ B into I A ^ B. The language Cdlal* of DLAL-k 
types is given by: 

A ::= a\D -o A\ Va.A | §A 
D ::= A\\A 

There is a natural map (.)* from Cdlal to Cdlal* such that [A => B)* = \A* 
B* and commutes with the other operations. The erasure map (.)" from Cdlal* to 
Cf can be defined as before. A DLAL-k type is called a bang type if it is of the form 
\A, and otherwise called a linear type. In the sequel, A, S, C stand for linear types, 
and D, E for either bang or linear types. 

We assume there is a countable set of term variables , z^, . . . for each D G 

DLAL-k . The pseudo-terms are defined by the following grammar: 

t,u ::= I Xx^.t \ {t)u \ Aa.t \ {t)A \ §t | §t, 

where A is a linear type and D is an arbitrary one. The idea is that § corresponds to the 
main door of a §-box (or a !-box) in proof-nets (PGi r87irAR02 1) while § corresponds 
to auxiliary doors. But note that there is no information in the pseudo-terms to link 
occurrences of § and § corresponding to the same box, nor distinction between §-boxes 
and ! -boxes. 

There is a natural erasure map from pseudo-terms to system F terms, which we will 
also denote by (.)^, consisting in removing all occurrences of §, replacing x^ with 
x^ and {t)A with {t)A~ . When t~ = M, t is called a decoration of A/. 



For our purpose, it is sufficient to consider the class of regular pseudo-terms, given 

by: 

t I Xx^.t I {t)u \ Aa.t \ {t)A 

where m is an arbitrary value in Z and §™t denotes § • • • § t if if m > 0, and § • • • § t 

ni times — m times 

Otherwise. In other words, a pseudo-term is regular if and only if it does not contain 
any subterm of the form §§m or §§u. 



3.2 Local typing condition 

We now try to assign types to pseudo-terms in a locally compatible way. A delicate 
point in DLAL is that it is sometimes natural to associate two types to one variable 
X. For instance, we have x : A;^dlal x : %A \n DLAL, and this can be read 
as a; : \A h x : %A in terms of DLAL* types. We thus distinguish between the 
input types, which are inherent to variables, and the output types, which are inductively 
assigned to all pseudo-terms. The condition (i) below is concerned with the output 
types. In the sequel, D° denotes §A if D is of the form \A, and otherwise denotes D 
itself. 

A pseudo-term t satisfies the local typing condition if the following holds: 

(i) one can inductively assign a linear type (called the output type) to each subterm 
of t in the following way (here the notation <^ indicates that t has the output type 
A): 

ix^)D° {¥a)^A i¥^A)A {Xx^.tB)D^B 

{{tD^B)uD°)B (Aa.iA)vQ.A i{tVa.A)B) a[B /a] 

(ii) when a variable x occurs more than once in t, it is typed as x'^, 

(iii) t satisfies the eigenvariable condition. 

We also say that t is locally typed. 

Notice that when D is a bang type, there is a type mismatch between D and D° 
in the case of application. For instance, {t\A^B)u^A satisfies (i) whenever t and u do. 
This mismatch will be settled by the bang condition below. Observe also that the local 
typing rules are syntax-directed. 



3.3 Boxing conditions 

We now recall definitions and results from IIBT05I giving some necessary conditions 
for a pseudo-term to be typable (in fBTOSI these conditions are used for Elementary 
Affine Logic typing). We consider words over the language £ = {§, §}*. If t is 
a pseudo-term and u is an occurrence of subterm in t, let doors(i, u) be the word 



inductively defined as follows: 

ift = u: doors(f, u) = e, 
else: 

doors(§t,tt) = § :: (doors(t, ti)) 

doors(§f,u) = § :: (doors(f, It)) 

(ioors{Xy^ .ti,u) = doors(Aa.fi, u) 

= doors((fi)A, u) = doors(fi,u) 

doors((fi)f2, u) = doors(fi, u) where is the 
subterm containing u. 

That is to say, doors(f, u) collects the modal symbols §, § occurring on the path from 
the root to the node u in the term tree of t. We define a map: s : £ ^ Z by: 

s(e) = 0, s{%::l) = l + s{l), s{l :: I) = -1 + s{l). 

A word I G jC is weakly well-bracketed if VT < I, s{l') > 0, and is well-bracketed if 
this condition holds and moreover s{l) = 0. 

Bracketing condition. Let i be a pseudo-term. We say that t satisfies the bracket- 
ing condition if: 

(i) for any occurrence of free variable x in t, doors(f, x) is well-bracketed; 
moreover for any occurrence of an abstraction subterm Xx.v of t, 

(ii) doors(t, Xx.v) is weakly well-bracketed, and 

(iii) for any occurrence of x in v, doors(w, x) is well-bracketed. 

This condition is sufficient to rule out the canonical morphisms for derehction and 
digging, which are not valid in DLAL (nor in EAL): 

{XTM.lx)i^A^A (Ax^^.§.t)§a^§§a 

Since doors(§x, x) = § and doors(§x, x) = §, they do not satisfy the bracketing con- 
dition (iii). 

Bang condition. A subterm u is called a bang subterm of t if it occurs as {t'ji^B)'^%A 
in t. We say that a locally typed pseudo-term t satisfies the bang condition if for any 
bang subterm u of t, 

(i) u contains at most one free variable x''^, having a bang type !C. 

(ii) for any subterm u of u such that v ^ u and v ^ x, s(doors(M, v)) > 1. 

This condition is sufficient to rule out the canonical morphisms for monoidalness 
\AiSi\B—o](A (g) B) and o!A which are not valid in LAL (the following terms 
and types are slightiy more comphcated since Cdlal* does not exphcitiy contain a 
type of the form A ^IB): 

Ax'(^^^).Ay'^^^.A^'^.(y)§((§x)§2) 



(y)§(§^) 



In the first pseudo-term, the bang subterm §((§a;)§z) contains more than one free vari- 
ables. In the second pseudo-term, the bang subterm § (§a;) contains a free variable typed 
by a linear type. Hence they both violate the bang condition (i). 

A-Scope condition. The previous conditions, bracketing and bang, would be enough 
to deal with boxes in the propositional fragment of DLAL. For handling second-order 
quantification though, we need a further condition to take into account the sequential- 
ity enforced by the quantifiers. For instance consider the following two formulas (the 
second one is known as Barcan 's formula): 



Assuming a occurs freely in A, formula (1) is provable while (2) is not. Observe that 
we can build the following pseudo-terms which are locally typed and have respectively 
type (1) and (2): 



Both pseudo-terms satisfy the previous conditions, but ^2 does not correspond to a 
DLAL derivation. 

Let w be a locally typed pseudo-term. We say that u depends on a if the type of u 
contains a free variable a. We say that a locally typed pseudo-term t satisfies the A- 
scope condition if: for any subterm Aa.u of t and for any subterm w of u that depends 
on a, doors(w, v) is weakly well-bracketed. 

Coming back to our example: ti satisfies the A-scope condition, but t-z does not, 
because {x)a depends on a and nevertheless doors(§((a;)a), {x)a) = § is not weakly 
well-bracketed. 

3.4 Correctness of the conditions 

Proposition 2 If M is a system F term such that the following judgement holds in 
DLAL: 

(*) xi: Ai,...,Xm-- A™; 2/1 : Bi, ...,?/„: B„ h M : C, 

^ A* 'A* 

then there is a decoration t of M with type C* and with free variables x'^ \ . . . , x'm™', 
Ui^ , ■ • ■ , ?/n " which is regular and satisfies the local typing, bracketing, bang and A- 
scope conditions. 

See the Appendix for the proof. 

We want now to examine the converse property. First observe that whenever pseudo- 
terms Xx^ .t, {t)u, Aa.t, {t)A satisfy the local typing, bracketing, bang and A-scope 
conditions, so do the immediate subterms t and u. The case of §t is handled by the 
following key lemma (already used for EAL* in BBTOSI t: 



§Va.A — o Va.§A 
Va.§A — o §Va.A 



(1) 
(2) 



t2 



Aa;§^"-^.Aa.§((§a;)a) 
Aa;^"-§'^.§Aa.§((a;)a) 



Lemma 3 (Boxing) If^{tA) is a pseudo-term which satisfies the local typing, brack- 
eting, bang and A-scope conditions, then there exist va, (ui)§Sj, . . . , (u„)§b„, unique 
(up to renaming of v'sfree variables) such that: 

1. FV{v) — {xi^ , ■ ■ ■ , x^" } and each Xi occurs exactly once in v, 

2. §i = §w[§Mi/a;i, . . . , ^Un/xn] (substitution is assumed to be capture-free), 

3. v,Ui, . . . ,Un satisfy the same conditions. 

Proof. Similar to the proof of Lemma 5 in fSTU51|. See the Appendix. 
Thanks to the previous lemma, we can now prove: 

Theorem 4 Let M be a system F term. Then xi : Ai, . . . , Xm ■ Am ; j/i : -Bi , . . . , ?/„ : 
Bn \- M : C is derivable in DLAL if and only if there is a decoration t of M with 
type C* and with free variables x'-^^ , ■ ■ ■ , x'm"^, yf^ i ■ • ■ j Vn" which is regular and 
satisfies the local typing, bracketing, bang and A-scope conditions. 

See AppendixIXIfor the proof. As a consequence, our DLAL typing problem boils 
down to: 

Problem 2 (decoration) Given a system F term M, determine if there exists a dec- 
oration t of M which is regular and satisfies the local typing, bracketing, bang and 
A-scope conditions. 

4 Parameterization and constraints 
4.1 Parameterized terms and instantiations 

To solve the decoration problem (Problem|2ji, one needs to explore the infinite set of 
decorations. This can be effectively done by introducing an abstract kind of types and 
terms with symbolic parameters, and expressing the conditions for such abstract terms 
to be materialized by boolean and integer constraints over those parameters (like in the 
related type inference algorithms for HAL or LAL mentioned in the introduction). 

We use two sorts of parameter: integer parameters n, m, . . . meant to range over 
Z, and boolean parameters bi, b2, . . . meant to range over {0, 1}. We also use linear 
combinations of integer parameters c = rii + • • • + nt, where fc > and each rij is an 
integer parameter In case fc = 0, it is written as 0. 

The set of parameterized types (p-types for short) is defined by: 

F a\D ^ A\'ia.A 

A 

D ::= t^^F 

where b is a boolean parameter and c is a linear combination of integer parameters. In 
the sequel, A,B,C stand for linear p-types of the form §'^F, and D for bang p-types of 
the form ^^'"^F, and E for arbitrary p-types. When D ~ ^^'^F, D° denotes the linear 



p-type §°F. We assume that there is a countable set of variables x , y , . . . for each 
bang p-type D. The parameterized pseudo-terms (p-terms for short) are defined by the 
following grammar: 

t ::= I Xx'^.t I {t)u \ Ka.t \ {t)A \ 

We denote by par^°°^{t) the set of boolean parameters of t, and by par^'^^{t) the 
set of integer parameters of t. 

An instantiation (p = (^^, for a p-term t is given by two maps (j)'' : par''""'' (t) 
{0, 1} and : par^"'*{t) — > Z. The map can be naturally extended to linear 
combinations c = ni + • • • + rik by 0*(c) = (/)*(ni) + • • • + 0'(nk). An instantiation 
is said to be admissible for a p-type E if for any linear combination c occurring 
in E, we have (p^{c) > 0, and moreover whenever ^^•'^F occurs in E, ^''(b) = 1 
implies (/)*(c) > 1. When cf) is admissible for E, a type (^{E) of DLAL-k is obtained 
by replacing each ^''F and ^^'"F with 0''(b) = by §'^'('=)0(f ), and ^^'"F with 

/(b) = Iby !§'^'('^)-V(i^)- 

So informally speaking, in §*'^^i^ the c stands for the number of modalities ahead 
of the type, while the boolean b serves to determine whether the first modaUty, if any, 
is § or !. 

An instantiation (j) for a p-term t is said to be admissible for t if it is admissible for 
all p-types occurring in t. When cf> is admissible for t, a regular pseudo-term (^{t) can 
be obtained by replacing each §™u with each with x'^'^^\ and each it) A 

with {t)4){A). 

As for pseudo-terms there is an erasure map (.)~ from p-terms to system F terms 
consisting in forgetting modalities and parameters. 

A linear free decoration {bang free decoration, resp.) of a system F type T is a 
Unear p-type (bang p-type, resp.) E such that (i) E~ = T, (ii) each Unear combination 
c occurring in E consists of a single integer parameter m, and (iii) the parameters 
occurring in E are mutually distinct. Two free decorations Ti and T2 are said to be 
distinct if the set of parameters occurring in Ti is disjoint from the set of parameters 
inTa. _ 

The free decoration M of a system F term M (which is unique up to renaming of 
parameters) is obtained as follows: first, to each type T of a variable x'^ used in M, 
we associate a bang free decoration T, and to each type U occurring as {N)U in T, we 
associate a linear free decoration U with the following proviso: 

(i) one and the same T is associated to all occurrences of the same variable x^; 

(ii) otherwise mutually distinct free decorations Ti, . . . , T„ are associated to differ- 
ent occurrences of T. 

M is now defined by induction on the construction of M: 

Xx^.M = §™Ax^.M {M)N = §™((M)7V) 
AoTM = §'"Aa.M (M)T = §'"((M)T) 

where all newly introduced parameters m are chosen to be fresh. The key property of 
free decorations is the following: 



Lemma 5 Let M be a system F term and t be a regular pseudo-term. Then t is a 
decoration of M if and only if there is an admissible instantiation 4> for M such that 
4)(M) ^t. 

Hence our decoration problem boils down to: 

Problem 3 (instantiation) Given a system F term M, determine if there exists an ad- 
missible instantiation 4> for M such that (f>{M) satisfies the local typing, bracketing, 
bang and K-scope conditions. 

For that we will need to be able to state the conditions of Theorem|4]on p-terms; 
they will yield some constraints on parameters. We will speak of linear inequations, 
meaning in fact both linear equations and linear inequations. 



4.2 Unification constraints 

To express the unifiability of two p-types Ei and E2, we define a set U{Ei, E2) of 
constraints by 

U{a,a) = 0, 
U{Di^ Ai,D2^ A2) = U{Di,D2)iJU{AuA2), 
U{\Ja.Ai,\Ja.A2) = U{Ai,A2), 

^(§ci^^^p^^) = {Ci =C2}UW(Fi,F2), 
^(§bi,cx^^ gb..c.^^) = {bi =b2,Ci -C2}UZ^(Fi,f^2), 

and undefined otherwise. It is straightforward to observe: 

Lemma 6 Let Ei, E2 be two p-types such that lA{Ei, E2) is defined, and (j) be an 
admissible instantiation for Ei and E2. Then (j){Ei) — 4i{E2) if and only if (p is a 
solution oflA{Ei , E2). 



4.3 Local typing constraints 

For any p-type E, Ai{E) denotes the set {c > : c occurs in E} U {b = 1 => c > 
1 : §'^''^F occurs in E}. Then cf) is admissible for E if and only if is a solution of 

MiE). 

When A is a linear p-type §'^i^, i3[yl/a] denotes a p-type obtained by replacing 
each ^"'a in B with §'='+<^F and each §''''^'a with ^b,c'+cp^ 

Now consider the free decoration M of a system F typed term M. We assign to 
each subterm < of M a //near p-type B (indicated as ts) and a set Ai{t) of constraints 
as on Figure 12] Notice that any linear p-type is of the form §''F. Moreover, since t 
comes from a system F typed term, we know that F is an implication when t occurs as 
(t§c p)u, and F is a quantification when t occurs as (i§c f)A. The unification Z//(_D°, ^4) 
used in A4{{t)u) is always defined, and finally, M satisfies the eigenvariable condition. 

Let Ltype(Af ) be the set 7W(Af ) U {b = 1 : x^^'"^ occurs more than once in M}. 



Mix) 

((i§c(£,^B))MA)_B M{{t)u) 
{Aa.tA)^o^a.A M{Aa.t) 

{m-Va.B)A)B[A/c.] M{{t)A) 



M{D) 

{m + c > Q}\JM{t) 
M{D)\JM{t) 

{c = 0}\JU{D°,A)\JM{t)\JM{u) 
M{t) 

{c = 0}\JM{A)\JM{t) 



Figure 2: M.{t) constraints. 



4.4 Boxing constraints 

In this section we need to recall some definitions from IBT05I . We consider the words 
over integer parameters m, n . . . , whose set we denote by Cp. 

Let i be a p-term and u an occurrence of subterm of t. We define, as for pseudo- 
terms, the word doors(t, u) in Cp as follows: 

ift — u: doors(f, u) = e, 
else: 

doors(§'"i, u) = m :: (doors(t, u)) 

doors(Ay°.ii, u) = doors(Aa.ti, u) 

= doors((ti)A, u) = doors(ti,u) 

doors((ti)t2, u) = doors(<,;, u) when t,; is the 
subterm containing u. 

The sum s{l) of an element I of Cp is a linear combination of integer parameters defined 
by: 

s(e) = 0, s{m :: I) = ■m + s{l). 

For each list I e Cp, define wbracket(;) ^ {s{l') > | < and bracket(;) = 
wbracket(Z) U {s{l) = 0}. 

Given a system F term M, we define the following sets of constraints: 
Bracketing constraints. Bracket(il/) is the union of the following sets: 

(i) bracket(doors(A/, x)) for each free variable x in M, 
and for each occurrence of an abstraction subterm Xx.v of M, 

(ii) wbracket(doors(M, Ax.w)), 

(iii) bracket(doors(w, x)) for each occurrence of x in v. 

Bang constraints. A subterm ua that occurs as (igc'(gb,c^_^5'))uA in M is called a 
bang subterm of M with the critical parameter b. Now Bang(M) is the union of the 
following sets: for each bang subterm u of M with a critical parameter b, 

(i) {b = 0} if u contains strictly more than one occurrence of free variable, and 
{b = 1 ^ b' = l}ifw contains exactly one occurrence of free variable 



(ii) {b = 1 => s(doors(u, w)) > 1 : w is a subterm of u such that v ^ u and 

V ^ x}. 

A-Scope constraints. Scope(M) is the union of the following sets: 

• wbracket(doors(77, v)) for each subterm Aa.u of M and for each subterm vofu 
that depends on a. 

We denote Const(M) = Ltype(M) U Bracket(M) U Bang(M) U Scope(M). We 
then have: 

Theorem 7 Let M be a system F term and (p be an instantiation for M. Then: (j) is 
admissible for M and 4>{M) satisfies the local typing, bracketing, bang and K-scope 
conditions if and only if (j) is a solution o/Const(M). 

Moreover, the number of(in)equations in Const(M) is quadratic in the size of M. 

5 Solving the constraints 

From a proof-net point of view, naively one might expect that finding a DLAL deco- 
ration could be decomposed into first finding a suitable EAL decoration (that is to say 
a box structure) and then determining which boxes should be ! ones. This however 
cannot be turned into a valid algorithm because there can be an infinite number of EAL 
decorations in the first place. 

Our method will thus proceed in the opposite way: first solve the boolean con- 
straints, which corresponds to determine which !-boxes are necessary, and then com- 
plete the decoration by finding a suitable box structure. 

5.1 Solving boolean constraints 

We divide Const(M) into three disjoint sets Const^(M), Const* (M) and Const™ (M): 

• A boolean constraint s G Const^(M) consists of only boolean parameters, s is 
of one of the following forms: 

bi = h-2 (in Ltype(M)) 

b = 1 (in Ltype(M)) 

b = (in Bang(M)) 

b = 1 ^ b' = 1 (in Bang(M)) 

• A linear constraint s £ Const* (M) deals with integer parameters only. A linear 
constraint s is of one of the following forms: 

ci = C2 (in Ltype(M)) 

c > (in Ltype(M), Bracket(M), Scope(M)) 
c = (in Ltype(M) and Bracket(M)) 

• A mixed constraint s G Const™ (M) contains a boolean parameter and a linear 
combination and is of the following form: 

b = l=>c>l (in Ltype(M) and Bang(M)) 



We consider the set of instantiations on boolean parameters and the extensional 
order < on these maps: -ip^ < cj)^ if for any b, ip^iyi) < ^''(b). 

Lemma 8 Const'' (M) has a solution if and only if it has a minimal solution ip''. The 
latter can be computed in time polynomial in the number of boolean constraints in 
Const* (M). 

Proof. Assuming that Const* (M) has a solution, we can compute the minimal one 
by a standard resolution procedure. See AppendixIXI ■ 

5.2 Solving integer constraints 

When (j)^ is a boolean instantiation, 0^Const™ (M) denotes the set of linear constraints 
defined as follows: for any constraint of the form b = l^c>lin Const™ (Af), 
c > 1 belongs to (p^Qonsf" (M) if and only if ^''(b) = 1. It is then clear that (*) 
{(j)^, </>*) is a solution of Const(M) if and only if (ffi is a solution of Const''(A/) and 
is a solution of 0''Const"(M) U Const'(M). 

Proposition 9 Const(M) admits a solution if and only if it has a solution tp = ip'^) 
such that is the minimal solution q/ Const* (A/). 

Proof Suppose that Const(Af) admits a solution {(f)'' , (j)"^). Then by the previous 
lemma, there is a minimal solution ip'' of Const* (A/). Since ip'' < (p^, we have 
V'*Const"(Af) C /Const'"(Af). Since 0* is asoMionof 0''Const"(M)UConst*(Af) 
by (*) above, it is also a solution of %p^ Const™ [M) U Const*(A/). This means that 
(V'*, (p^) is a solution of Const(Af ). ■ 

Coming back to the proof-net intuition, Proposition|9]means that given a syntactic 
tree of term there is a most general (minimal) way to place ! boxes (and accordingly ! 
subtypes in types), that is to say: if there is a DLAL decoration for this tree then there 
is one with precisely this minimal distribution of ! boxes. 

Now notice that '0''Const™(Af ) U Const' (Af) is a linear inequation system, for 
which a polynomial time procedure for searching a rational solution is known. 

Lemma 10 7/'*Const™(A'/) U Const* (Af) has a solution in Q if and only if it has a 
solution in Z. 

Proof. Clearly the set of solutions is closed under multiplication by a positive integer.B 

Theorem 11 Let M be a System F term. Then one can decide in time polynomial in 
the number of constraints in Const(Af) whether Const(Af) admits a solution. 

Proof. First apply the procedure described in the proof of Lemma |8] to decide if 
there is a minimal solution ip^ of Const*(Af ). If it exists, apply the polynomial time 
procedure to decide if ip^Qonst™'{M) U Const* (A/) admits a solution in Q. If it does, 
then we also have an integer solution. Otherwise, Const(A/) is not solvable. ■ 
By combining Theorem |3 Lemma |5] Theorems and ^3 we obtain our main 
theorem: 

Theorem 12 Given a system F term M^, it is decidable in time polynomial in the size 
of M whether there is a decoration A ofT such that Y-dlal M : A. 



6 Implementation 



6.1 Overview 

We designed an implementation of the type inference algorithm. The program is writ- 
ten in functional Caml and is quite concise (less than 1500 lines). A running program 
not only shows the actual feasibihty of our method, but also is a great facility for build- 
ing examples, and thus might allow for a finer study of the algorithm. 

Data types as well as functions closely follow the previous description of the algo- 
rithm: writing the program in such a way tends to minimise the number of bugs, and 
speaks up for the robustness of the whole proof development. 

The program consists of several successive parts: 

1. Parsing phase: turns the input text into a concrete syntax tree. The input is an F 
typing judgement, in a syntax d la Church with type annotations at the binders. It 
is changed into the de Bruijn notation, and parameterized with fresh parameters. 
Finally, the abstract tree is decorated with parameterized types at each node. 

2. Constraints generation: performs explorations on the tree and generates the boolean, 
linear and mixed constraints. 

3. Boolean constraints resolution: gives the minimal solution of the boolean con- 
straints, or answers negatively if the set admits no solution. 

4. Constraints printing: builds the final set of hnear constraints. 

We use the simplex algorithm to solve the linear constraints. It runs in 0(2"), 
which comes in contrast with the previous result of polynomial time solving, but has 
proven to be the best in practice (with a careful choice of the objective function). 

6.2 An example of execution 

As an example, let us consider the reversing function rev on binary words, apphed to 
1010. rev can be defined by a single higher-order iteration, and thus represented by the 
following system F term: 

Xl^.K/3.Xso^^'^.Xsif^^f^.{l (/3 ^ /?)) 
Xal^^'^.Xx'^.{a){so)x 
Xal^^f^.Xxl^.{a){si)x {Aa.Xz" .z)l3 

We apply it to : 

Aa. Aso"^" . Asi"^" . Aa;" . (si) (so) {si) {so)x, 

representing the word 1010. Since rev involves higher-order functionals and polymor- 
phism, it is not so straightforward to tell, just by looking at the term structure, whether 
it works in polynomial time or not. 



Given rev(lOlO) as input (coded by ASCII characters), our program produces 177 
(in)equations on 79 variables. After constraint solving, we obtain the result, that can 
be read as: 

§(§((/ iP^P)) 
§Aa^-°^.Ax'3.(a)(§so)x 
^Xc/^^'^.Xx'^.ia){^si)x) 
(Aa.Az".z)/3) 
Aa.Aso'«^".Asi"^«.§Aa;".(§sz)(§so)(§si)(§so)a; 

It corresponds to the natural depth- 1 typing of this term, with conclusion type Wd lal —° 
Wdlal- The solution ensures polynomial time termination, and in fact its depth guar- 
antees normalization in a quadratic number of /3-reduction steps. 

Further examples, as well as the program itself, will be available at 

http: //www-lipn . univ-parisl3 . fr/~atassi/ 
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APPENDIX 



A Proofs 

Proof of Proposition^ 

Proof. First, one can build a (possibly non-regular) decoration A/+ of M satisfying 
the four conditions by induction on the derivation. Depending on the last typing rule 
used (see Figure^, Af + takes one of the following forms: 

(Id) x^* (§e) M+[N+/x] 

(-^i) Ax^*.M+ (^e) {M+)N+ 

(^i) Ax'^*.M+ (=^e) (M+)§^+[§z"^*/^] 

(Weak) M+ (Cntr) M+[x/xi,x/x2] 

(Vi) Aa.M+ (Ve) {M+)B* 

(§i) §A./+[§x;^Va;„§2/fV2/,] 

where M'^ in (§ i) has free variables xf^ , ■ • • , a;^" , yf^ , ■ ■ • , y^"- 

It is easily verified that has a suitable type and satisfies the four conditions; let 
us just remark: 

• The bang condition for (A/+)§A^+[§z''^ / z] in (=^ e) follows by the bracketing 
condition for A^+, which holds by the induction hypothesis, while the A-scope 
condition follows by the eigenvariable condition for N^. Similarly for the case 
of(§i). 

• Af + [A^+/a;] in (§ e) satisfies the A-scope condition since substitution is capture- 
free, and satisfies the bang condition since x has a linear type and thus cannot 
appear inside a bang subterm of A/+. 

Finally, the required regular pseudo-term t is obtained from A/+ by applying inside 
t the following rewrite rules as many times as possible: 

§§u — > u, §§u — > u. 

It is clear that the four conditions are preserved by these reductions. ■ 
Proof of Lemma]3\ 

Proof. Given assign an index to each occurrence of § and § in §i to distinguish 
occurrences (we assume that the outermost § have index 0). One can then find closing 
brackets §i, . . . , §„ that match the opening bracket §o in §ot. Replace each {^iUi)Bi 
with a fresh and distinct free variable xf^ (1 < j < n), and let %v be the resulting 
pseudo-term. This way one can obtain v, Ui, ... , u„, such that condition 2 holds. 

As to point 1 ., we claim that v does not contain a free variable other than xi, . . . ,Xn. 
If there is any, say y, then it is also a free variable of t, thus the bracketing condition 
for §ot implies that doors(§ot, y) is well-bracketed, and thus there is a closing bracket 
that matches §o in the path from §ot to y. That means that y belongs to one of ui, . . . , 
Un, not to V. Hence condition 1 holds. 



We now need to check point 3. The bracketing condition for w, ui, . . . , u„ can be 
shown as in IBT051 . The A-scope condition is easy to verify. 

As to the local typing condition, the only nontrivial point is that v satisfies the 
eigenvariable condition. Suppose that the type Bi of Xi contains a bound variable 
a of V. Then §oi contains a subterm of the form Aa.v'\^iUi/xi] and Ui depends on 
a. However, door5{v", Ui) with v" — v'[^iUi/xi\ cannot be weakly well-bracketed 
because §i should match the outermost opening bracket §o. This contradicts the A- 
scope condition for §of. 

To show the bang condition for v (it is clear for ui, . . . , Un), suppose that v contains 
a bang subterm v'. We claim that v' does not contain variables xi, . . . , x„- If it contains 
any, say Xi, then §ot contains v'[^,iUi/xi] and the bang condition for §o^ implies that 
s(doors(w", §iti)) > 1 with u" = v'[^iUi/xi]. On the other hand, we clearly have 
s(doors(§oi, v")) > 1 because v" contains the closing bracket that matches §o. As a 
consequence, we have s(doors(§oi, §iUi)) > 2. This means that §i does not match §o, 
a contradiction. As a consequence, v' does not contain xi, . . . ,Xn- So v' occurs in §ot, 
and therefore satisfies the bang condition. ■ 

Proof of Theorem^ The 'only if direction has already been given by Proposition 
|2] The other direction is proved by induction on the size of pseudo-term t. 

When t is a variable (a;^)£)o, the claim can be established by (Id) and (§ i). Note 
that t cannot be of the form §u due to the bracketing condition. 

When t is one of Xx^ .u, {u)v (with v not a bang subterm), Aa.u, {u)A, the sub- 
terms u and V also satisfy all conditions. Hence we can use the induction hypothesis to 
show that t~ is typable in DLAL. When t is §u, apply Lemma|3]and argue similarly 
by using rules (§ e). 

When t is {u\A^B)vtjA, i-c, with v a bang subterm, we have F; A h : A ^ B 
with suitable T and A by the induction hypothesis. 

If f is a variable, then it must be of the form x'^ by the bang condition (i). Hence 
by applying (=> e) to F; A h : A ^ B and ■,x:A\-x:A,we obtain r,x : A; A\- 
{u~)x : B as required. 

If V is not a variable, then it must be of the form §t;o due to the bang condition 
(ii) and contain at most one free variable. Let us suppose that it contains y '^ . Now, 
the bracketing condition implies s(doors(§i;o, y)) — while the bang condition im- 
plies s(doors(§i;o; w')) > 1 for any subterm v' of vq other than y. Therefore, com- 
bined with Lemma |3j it follows that v is actually of the form §111 [§y /a;], where vi 
contains a variable x'~^ and satisfies all the conditions. By induction hypothesis, we 
have ;x : C \- -.A, and hence ly : C \- v^[y/x] : Ahy renaming. Therefore, we 
obtainF,?; : C; A h : Sby(^e). ■ 

Proof of Lemma^ Let B Const''(M). Apply repeatedly the following steps until 
reaching a fixpoint: 

• if bi = b2 e S and bi = e 6 (resp. bi = 1 e B), then let 6 := S U {ba = 
0} (resp. B:=BU{h2 = 1}); 



• if (b = 1 ^ b' = 1) e S and b = 1 e then let B:^BU{h' ^ 1}. 



It is obvious that this can be done in a polynomial number of steps and that the resulting 
system B is equivalent to Const''(M). 

Now, if B contains a pair of equations: b = 0, b = 1, then it is inconsistent. 
Otherwise define the boolean instantiation such that tp^{h) :=lifb = leB and 
ip^{h) := otherwise: 

It is clear that tp^ is a solution of B. In particular, observe that any constraint of 
the form (b = 1 ^ b' = 1) in is satisfied by (/;*. Moreover any solution 4)^ of B 
satisfies: < (/>''. Therefore if Const'' (M) has a solution then it has a minimal one.B 



